IntrospectResponse models RFC 7662 token introspection response fields.
subject must be a canonical Gestalt subject ID, for example a user: subject
using a stable user identifier or verified email. It must not be a raw
upstream OIDC sub. Empty scope means full first-party/Gestalt access for
that grant.
IntrospectResponse models RFC 7662 token introspection response fields. subject must be a canonical Gestalt subject ID, for example a user: subject using a stable user identifier or verified email. It must not be a raw upstream OIDC sub. Empty scope means full first-party/Gestalt access for that grant.